ConsoleApp4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ConsoleApp4.exe
Size

5KB
MD5

7dbd2263fbbe866f474878e2e1a80385
SHA1

42057971bf57041d2e6678ec20bc45dfe789afda
SHA256

de66acf4b6d5c4c8602e39912e575b96a4a9a82a000d28c8e6ce2ff26781d4d1
SHA512

a2c3b61f6d87be8e1777c16b5bf55617c18a1f3dfa7e0a9c8e2b864e4b34f085830315b8447cad0927fa0e63ecdc67bb190c8df762c8de0227fb4188f67f3c02
SSDEEP

48:6lWC92DHVmHnKwQiExNMH+x6B9aMk/CoDnGVzbLpbv54tdtOlrDa/6TFCpfbNtm:2Y10ndvW7rGVz59l+zNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConsoleApp4.exe

Files

ConsoleApp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\JEKA\source\repos\ConsoleApp4\ConsoleApp4\obj\Release\ConsoleApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ